#LightningNetwork

This issue discloses two denial-of-service flaws in Eclair's channel-opening process involving duplicate channel identifiers and limits on pending channels. They could exhaust memory. The newsletter states that versions through v0.14.0 were affected and that fixes shipped in July with v0.14.1.

LN-GAP explores complex, multi-round contracts inside Lightning channels. A committee attests whether messages were published on time, addressing an unresponsive counterparty. Although the committee does not custody funds, security still depends on an honest majority, so the design is not fully trustless.

This issue covers two older Eclair denial-of-service vulnerabilities in feature-bit parsing and gossip-message decompression, where small requests could consume excessive resources. The newsletter says versions through v0.13.1 were affected and fixes shipped in May with v0.14.0. October is the disclosure date.

Another proposal would let wallets sharing a descriptor synchronize encrypted labels through an untrusted store, reducing manual export and import. It builds on BIP329 records and addresses conflicts and deletion markers. Standardization was still under discussion.